From owner-freebsd-questions@FreeBSD.ORG Thu Dec 6 11:18:54 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7B38A16A419 for ; Thu, 6 Dec 2007 11:18:54 +0000 (UTC) (envelope-from nvass@teledomenet.gr) Received: from smtp.teledomenet.gr (smtp.teledomenet.gr [213.142.128.2]) by mx1.freebsd.org (Postfix) with ESMTP id 310D413C46E for ; Thu, 6 Dec 2007 11:18:54 +0000 (UTC) (envelope-from nvass@teledomenet.gr) Received: by smtp.teledomenet.gr (Postfix, from userid 58) id 45F9C1422B4; Thu, 6 Dec 2007 13:18:53 +0200 (EET) X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on smtp.teledomenet.gr X-Spam-Level: X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham version=3.2.3 Received: from iris (unknown [192.168.1.71]) by smtp.teledomenet.gr (Postfix) with ESMTP id A4DAA1426CB; Thu, 6 Dec 2007 13:18:44 +0200 (EET) From: Nikos Vassiliadis To: freebsd-questions@freebsd.org Date: Thu, 6 Dec 2007 13:21:48 +0200 User-Agent: KMail/1.9.7 References: <14188023.post@talk.nabble.com> <200712061155.59434.nvass@teledomenet.gr> <14189511.post@talk.nabble.com> In-Reply-To: <14189511.post@talk.nabble.com> X-NCC-RegID: gr.telehouse MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200712061321.48728.nvass@teledomenet.gr> Cc: Atrox Subject: Re: enabling if_bridge STP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2007 11:18:54 -0000 On Thursday 06 December 2007 12:20:18 Atrox wrote: > Well, as I understand, in my case, STP should be enabled mainly on > TAP-interfaces as it would eliminate the scenario where, for an example, > ARP-requests from 192.168.1.1 for 192.168.3.1 reach 192.168.2.1. Have I > understood it correctly? It sounds like you want to isolate the ethernets, not bridge them. Bridging is not what you need, if I have understood correctly. You want to keep ARP and broadcasts to the relevant boxes, right? You have to use VLANs on your switch to achieve this, not bridging. HTH, Nikos